Platform Engineering Lead

Finstro; Sydney; On-site; AUD 180,000 - 230,000; Full time

Benefits offered by this job

Competitive compensation with superann

Cutting-edge tech environment

Collaborative team culture

Job summary

Finstro is seeking a hands-on Platform Engineering Lead in Sydney to own the design, security, reliability and day-to-day operation of our AWS platform and the developer experience built on top of it.

You'll write Terraform, fix pipelines, tune alerts, lead incidents and set engineering standards. Initially an IC with potential to grow a small team as the platform matures, focusing on consolidation and strong foundations.

Qualifications

• Hands-on AWS engineering experience with production responsibilities.
• Experience designing platforms and multi-account environments.
• Strong background in IaC and automated pipelines.
• Familiarity with security, compliance and cost governance.

Responsibilities

• Own the architecture, build and operation of Finstro’s AWS platform, with IaC and cost forecasting.
• Lead security, patching, vulnerability remediation and compliance integration.
• Define engineering standards, document them and mentor engineers while shaping the platform roadmap.

Skills

AWS engineering

Infrastructure as Code

CI/CD engineering

Security-minded engineering

Technical leadership

Cross-team collaboration

Tools

Terraform

GitHub Actions

GitLab CI

Jenkins

Job description

We are looking for a hands-on Platform Engineering Lead to own the design, security, reliability and day-to-day operation of Finstro’s AWS platform, as well as the developer experience built on top of it.

This is a technical leadership role where you’ll set the standards and then build them. You’ll be in the code and the console, writing Terraform, fixing pipelines, tuning alerts and leading incidents, while helping the wider engineering team ship safely and quickly.

You’ll bring structure to what exists today, define what good looks like, and turn that into documented, automated and repeatable ways of working that can scale as the organisation grows.

The role starts as a lead-by-example individual contributor, with the opportunity to build a small platform engineering team as the platform matures. The first six months will focus on platform consolidation, production reliability and establishing strong engineering foundations

About Finstro

Finstro is a fast-growing non-bank lender, providing businesses with cash flow, flexibility and confidence every step of the way. We go beyond rigid product silos and understand speed is only a part of the answer.

Since 2012, we’ve supported the growth aspirations of over 6,000 businesses through over $2.5b of funded transactions.

If you have energy, ambition and want to work for a dynamic, rapid growth, FinTech business, there are exciting opportunities to advance your career by joining our global team.

Key Skills Required

To excel in this role you'll need deep, current, hands-on AWS engineering skills and the judgement to know when to build, when to buy and when to leave something alone. You are pragmatic rather than dogmatic: you'll choose the boring, well-understood option that the team can operate over the elegant one that only you can.

You are comfortable owning production in a small organisation, diagnosing under pressure, making the call, and then fixing the underlying cause rather than the symptom. You are the final technical escalation point for the platform, and that is the part of the job you find energising rather than daunting.

You lead through credibility and working examples and write things down as a habit rather than a task at the end. You take real satisfaction in removing toil for other engineers. You can explain technical risk and trade-offs to a non-technical audience and know the difference between a control that materially reduces risk and one that simply adds process.

Key Responsibilities:

• Infrastructure ownership. Own the architecture, build and operation of Finstro’s AWS platform: compute, networking, data stores, identity and deployment environments. All new infrastructure is defined as code, with existing production brought under infrastructure-as-code management against an agreed plan. Cloud spend is understood, attributed and forecast as a first-class engineering concern.
• Security and compliance. Partner with Security and Risk to keep the platform defensible: least-privilege IAM, secrets management, patching and vulnerability remediation, network segmentation, logging and audit evidence. Build controls into the platform and delivery pipeline rather than bolting them on, in line with Finstro’s legal, regulatory and contractual obligations in each market. Security and Risk set the requirement. This role builds the controls and produces the evidence.
• Standards and technical leadership. Define, document and champion the engineering standards for how we build, deploy, run and secure services. Influence and mentor engineers without relying on formal authority. Own the platform roadmap and represent its priorities in quarterly planning.

Experience and Skills Required:

• Deep hands-on AWS as builder and operator, not only architect: Lambda, ECS and EC2, networking (VPC, subnetting, routing, DNS, load balancing), data services (RDS, S3, DynamoDB), multi-account structure and governance (AWS Organizations), identity (IAM Identity Center), with experience setting up or restructuring a multi-account environment, and cost visibility.
• Expert with infrastructure as code, ideally Terraform: module design, state management, drift detection and multi-environment promotion.
• Strong CI/CD engineering (GitHub Actions, GitLab CI, Jenkins or similar), including artefact management and familiarity with safe release strategies (blue/green, canary, rollback).
• Security-minded engineering: least-privilege IAM, secrets management, patching and vulnerability remediation within the AWS platform.
• Strong written and verbal communication, from engineers through to non-technical stakeholders and executives.
• Experience working in a regulated or audited environment (e.g. ISO 27001, SOC 2, PCI DSS or APRA-aligned environments).
• Experience collaborating with engineering teams across different time zones.

What we offer:

• Competitive compensation package including superannuation and benefits.
• Opportunity to work with cutting-edge technologies in a dynamic and innovative environment.
• Collaborative and supportive team culture.

This role is based onsite in Sydney, Australia. Candidates must be in and authorised to work in Australia.